In #34319, we are looking to add support for mirrors for private registries, which has brought up the topic of how to deal with auth.

Personally speaking, I don't want to see:

1. Auth credentials stored on the daemon side
2. Universal auth credentials for all clients
3. An even greater mess of the existing auth scenarios (Seriously, read through the code and tell me how long it takes you to figure out all that is happening).